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In the Specification : 

Please amend the Specification as shown below. Applicant respectfully submits that the 
proposed amendments are being provided to correct various informalities in the Specification, and 
that no new matter is being added. 

Please replace paragraph [0086] with new paragraph [0086] as shown below. 

[0086] As seen in FIG. 5, application guard 310 includes an application guard interface 51 2 

(referred to as interface 332 in FIG. 3A), coupled to an application 312, for requesting access to 
securable components. Application guard 31 0 also includes at least one authorization engine 316 
for evaluating requests from application guard interface 512 as specified by local client security 
policy 318. The application guard 310 can further include an evaluator 516, an audit 518, a 
parser/type checker 51 4. and various plug-ins 522. Multiple authorization engines 31 6 can be used 
for added performance and reliability. Furthermore, application guard interface 51 2 can be located 
on a client computer, while authorization engine 31 6 and local client policy 31 8 can be located on 
client server 116. 

Please replace paragraph [0047] with new paragraph [0047] as shown below: 

[0047] FIG. 1 A is a block diagram of an exemplary network system 110, in accordance with 

the invention, illustrating one embodiment of network system 1 00 of FIG. 1 . System 1 1 0 includes 
a policy manager server 1 1 2 connected via a network 1 1 4 to a client server 1 1 6.i (i = 1 , 2, . . . , or n). 
In the FIG. 1 A embodiment, policy manager server 1 1 2 preferably includes a central processing unit 
(CPU) H-8 146, a read only memory (ROM) 120, a random access memory (RAM) 122, a non- 
volatile memory 124, an input device 126, and a display 128, all connected via a bus 130. 
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